Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/612d573a-bffc-3c74-84eb-05009d258d33.roa
File:                     612d573a-bffc-3c74-84eb-05009d258d33.roa (raw, json)
Hash identifier:          Gcb5T1TYC0Kp3bDmOsPMqaiS2yA56C11agl9xy60ErY=
Subject key identifier:   72:E1:CF:C2:FB:C9:AC:D4:AE:D6:68:61:5D:F8:3A:64:E4:E1:5F:F2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DA1E0A25120D017A093305060
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/612d573a-bffc-3c74-84eb-05009d258d33.roa
Signing time:             Wed 20 Apr 2022 04:00:00 +0000
ROA not before:           Wed 20 Apr 2022 04:00:00 +0000
ROA not after:            Fri 18 Apr 2025 04:00:00 +0000
asID:                     701
IP address blocks:        72.73.48.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Wed 08 Nov 2023 19:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a1:e0:a2:51:20:d0:17:a0:93:30:50:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 20 04:00:00 2022 GMT
            Not After : Apr 18 04:00:00 2025 GMT
        Subject: CN=246c791e-9eb8-4c53-a8d8-5c445429c132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:87:2e:53:0b:ac:cf:3f:3a:92:c1:c2:36:d7:
                    de:29:9b:5b:7c:bc:8f:96:4a:53:b1:88:6f:8f:ae:
                    53:3a:e8:f2:2a:6b:6e:8f:6d:5d:29:1d:41:3b:ec:
                    c3:3b:de:17:73:d3:9e:62:8e:17:92:6b:2f:cd:63:
                    30:00:c6:b1:6d:7c:26:8a:64:59:e6:20:79:1f:bb:
                    6d:98:4e:c3:8a:ae:e4:7a:d6:12:c3:4e:78:06:84:
                    97:a7:2c:cc:f6:86:a5:3f:5b:40:45:b5:f4:9d:8e:
                    1b:af:25:3a:66:4b:cc:d5:2c:19:89:08:5a:e0:86:
                    ca:4e:84:8a:c4:cb:f4:0b:fa:b5:60:a8:8b:c3:cd:
                    64:5b:be:6c:a9:ea:0d:5d:bc:af:42:dd:fb:26:c0:
                    87:8b:75:15:a8:ad:14:8a:bb:b8:ef:b4:81:1c:45:
                    da:0b:96:4b:b3:00:e6:c8:88:90:ae:63:9d:44:d8:
                    0e:18:4c:73:86:cd:ab:c9:8d:e7:97:a9:e3:15:7f:
                    f9:e7:a4:0c:3f:bc:b3:72:91:0e:54:82:37:69:de:
                    f1:87:91:a5:53:5e:ce:b6:18:cb:32:e3:2d:b4:94:
                    b8:c9:30:f6:49:cb:05:0d:56:4c:3b:58:b8:2f:84:
                    6b:b1:e6:93:84:ec:6b:83:4d:ca:2c:ab:03:8b:3e:
                    39:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E1:CF:C2:FB:C9:AC:D4:AE:D6:68:61:5D:F8:3A:64:E4:E1:5F:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/612d573a-bffc-3c74-84eb-05009d258d33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.73.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f3:1e:e8:f8:cd:32:34:dc:c7:80:8b:75:90:73:c3:91:d5:
         a0:f7:1b:62:5a:ee:1e:a2:41:3c:77:63:2a:12:99:d8:5c:b4:
         fc:8d:09:0e:df:c5:16:d1:c6:45:05:87:0c:4c:a9:32:ed:98:
         d2:11:46:56:4d:ce:63:17:df:e6:9a:8a:c7:97:ad:09:fc:9f:
         73:9b:70:fc:4f:44:a6:fc:5e:59:05:75:26:6c:64:d2:57:97:
         f5:5e:ad:49:5a:e8:bb:83:70:b1:03:bd:d9:3f:31:01:51:43:
         3f:98:5e:39:5d:a5:56:4b:4e:f5:97:ac:3d:42:3b:76:20:1e:
         e7:8e:6b:d6:82:aa:89:52:ca:24:3b:f6:ea:d2:95:db:b2:40:
         6b:9c:44:21:2e:bf:cb:3b:22:20:a0:61:c7:c0:aa:ed:68:2f:
         01:f8:ee:0b:cf:6f:7a:f2:d9:83:57:83:9f:c9:06:58:76:51:
         25:9a:a0:e0:40:33:a1:f5:a1:ce:a6:3b:19:82:dc:db:fd:87:
         76:bf:77:d5:6f:b9:d7:bd:a0:68:97:33:d4:53:ed:29:6f:88:
         78:d3:ad:9a:0e:77:0d:dc:61:19:84:69:e6:91:71:02:67:a8:
         76:fa:25:94:d9:1f:71:4c:68:24:50:ce:44:c6:3c:25:43:ac:
         c9:92:5f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----